自动从Windows组中删除用户？ [英] Automatically remove a user from a Windows group?

问题描述

我们要求在一段固定的时间内（例如24小时）限制对一组应用程序的访问 - 有没有办法在设定的时间过后自动从组中删除用户？

解决方案

您可以在Active Directory帐户上设置帐户过期。

请参阅：

~ 关于帐户到期属性的MSND文章 [ ^ ]

~ 设置 - ADAccountExpirationSets - 设置Active Directory帐户的到期日期。 [ ^ ]



祝你好运，

Edo

让他们通过特定的网络连接访问系统/服务器。大多数网络盒可以允许按日程安排从某些界面进行访问。



这可能听起来很尴尬，但我认为它比以前更健壮，易于管理/监控/登录尝试控制Windows机器。

谢谢，但我不希望帐户过期，我只是希望将它们从特定组中删除。

We have a requirement to limit the access to a set of applications for a fixed period of time (e.g. 24 hours) - is there a way to automate the removal of users from a group after a set time has elapsed?

解决方案

You can set Account Expiration on an Active Directory Account.
See:
~ MSND article on the Account-Expires attribute[^]
~ Set-ADAccountExpirationSets - Sets the expiration date for an Active Directory account.[^]

Good luck,
Edo

Have them access the system/server through a specific network connection. Most network boxes can allow access from certain interfaces on a daily schedule.

This might sound awkward but I think it is more robust and easy to manage/monitor/log than trying to control on a Windows machine.

Thanks but I don't want the account to expire, I just want them to be removed from the particular group.

这篇关于自动从Windows组中删除用户？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！